This coming from a place where #MongoDB’s offering of #MongoAtlas itself offers direct access to data reading and manipulation with very little in the way of fine grained permissions for their web interface. And they don’t grant audits by default for it. It costs 10% of the bill to get answers to the question of “who ran what query and when?”. And even then, it’s not straightforward